diff --git a/playbooks/mirror.pkgbuild.com.yml b/playbooks/mirror.pkgbuild.com.yml deleted file mode 100644 index c8e622ed4ef6c91c976a41729dee50f501a998f2..0000000000000000000000000000000000000000 --- a/playbooks/mirror.pkgbuild.com.yml +++ /dev/null @@ -1,15 +0,0 @@ ---- - -- name: setup mirror load balancer (using geoip) - hosts: mirror.pkgbuild.com - remote_user: root - roles: - - { role: common } - - { role: firewalld } - - { role: sshd } - - { role: root_ssh } - - { role: sudo } - - { role: zabbix-agent, when: "'unmanaged' not in group_names" } - - { role: certbot } - - { role: nginx } - - { role: mirror_load_balancer } diff --git a/roles/mirror_load_balancer/files/load-geoip.conf b/roles/mirror_load_balancer/files/load-geoip.conf deleted file mode 100644 index 09b2904913b4d0c644f817f4e69ef19ee0cbbef0..0000000000000000000000000000000000000000 --- a/roles/mirror_load_balancer/files/load-geoip.conf +++ /dev/null @@ -1 +0,0 @@ -load_module /usr/lib/nginx/modules/ngx_http_geoip2_module.so; diff --git a/roles/mirror_load_balancer/tasks/main.yml b/roles/mirror_load_balancer/tasks/main.yml deleted file mode 100644 index c72b8d01f07496022d7e0c26d5653307968049d5..0000000000000000000000000000000000000000 --- a/roles/mirror_load_balancer/tasks/main.yml +++ /dev/null @@ -1,26 +0,0 @@ ---- - -- name: install nginx-mod-geoip2 - pacman: name=nginx-mod-geoip2,geoipupdate state=present - -- name: install geoipupdate config - template: src=GeoIP.conf.j2 dest=/etc/GeoIP.conf owner=root group=root mode=0644 - notify: - -- name: install mirror.pkgbuild.com.conf - template: src=nginx.d.conf.j2 dest=/etc/nginx/nginx.d/mirror.pkgbuild.com.conf owner=root group=root mode=0644 - notify: - - reload nginx - tags: ['nginx'] - -- name: install toplevel-snippet - copy: src=load-geoip.conf dest=/etc/nginx/toplevel-snippets/load-geoip.conf owner=root group=root mode=0644 - notify: - - reload nginx - tags: ['nginx'] - -- name: make nginx log dir - file: path=/var/log/nginx/{{ mirror_domain }} state=directory owner=root group=root mode=0755 - -- name: enable geoipupdate timer - systemd: name=geoipupdate.timer enabled=yes state=started diff --git a/roles/mirror_load_balancer/templates/GeoIP.conf.j2 b/roles/mirror_load_balancer/templates/GeoIP.conf.j2 deleted file mode 100644 index d07fbb2bb4286840401650b030b7264708e1be5d..0000000000000000000000000000000000000000 --- a/roles/mirror_load_balancer/templates/GeoIP.conf.j2 +++ /dev/null @@ -1,4 +0,0 @@ -AccountID {{ vault_mirror_maxmind_id }} -LicenseKey {{ vault_mirror_maxmind_license }} - -EditionIDs GeoLite2-City diff --git a/roles/mirror_load_balancer/templates/nginx.d.conf.j2 b/roles/mirror_load_balancer/templates/nginx.d.conf.j2 deleted file mode 100644 index b66a486e1e109384a600c9e8f8fb52f70cf4d207..0000000000000000000000000000000000000000 --- a/roles/mirror_load_balancer/templates/nginx.d.conf.j2 +++ /dev/null @@ -1,35 +0,0 @@ -geoip2 /var/lib/GeoIP/GeoLite2-City.mmdb { - $geoip2_data_continent_name continent names en; -} - -map $geoip2_data_continent_name $preferred_upstream { - default ger.mirror.pkgbuild.com; - 'Africa' ger.mirror.pkgbuild.com; - 'Europe' ger.mirror.pkgbuild.com; -} - -log_format loadbalancer - '$host [$time_local] "$request" ' - '$status $body_bytes_sent "$http_referer" ' - '"$http_user_agent" dispatched to $scheme://$preferred_upstream$request_uri'; - -server { - listen 80; - listen [::]:80; - listen 443 ssl http2; - listen [::]:443 ssl http2; - server_name {{ mirror_domain }}; - - access_log /var/log/nginx/{{ mirror_domain }}/access.log loadbalancer; - error_log /var/log/nginx/{{ mirror_domain }}/error.log; - - include snippets/letsencrypt.conf; - - ssl_certificate /etc/letsencrypt/live/{{ mirror_domain }}/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/{{ mirror_domain }}/privkey.pem; - ssl_trusted_certificate /etc/letsencrypt/live/{{ mirror_domain }}/chain.pem; - - location / { - return $scheme://$preferred_upstream$request_uri; - } -}